Fix npm security alerts and drop useless overrides

Browse Source

Regenerate the stale package-lock and pin patched versions for the
Dependabot-flagged packages (@vitest/browser, form-data, undici,
brace-expansion, js-yaml, esbuild, dompurify, @babel/core, vite,
@opentelemetry/core via posthog-js). Remove the harmful langsmith
override (it forced the vulnerable 0.5.x line) and the zero-effect
lodash-es override.

Signed-off-by: Sacha Al Himdani <sacha@probo.com>

...

This commit is contained in:

Sacha Al Himdani

2026-06-23 11:14:46 +02:00

parent 55fa392217

commit 6e86c4ba89

3 changed files with 2188 additions and 6048 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

8222

package-lock.json generated

File diff suppressed because it is too large Load Diff